Confidentiality policy

Charter on the protection of personal data

This charter describes the data processing implemented by the company MALOU-FOOD MARKETING, a company with a capital of 1520.22€, registered in the CRETEIL Trade and Companies Register, under number 832 965 255, whose head office is located at 35 Avenue du Mal de Lattre de Tassigny, 94220 Charenton-le-Pont, (hereinafter “Malou”), in connection with the use of the site Internet https://malou.io/ (the “Site”) and the implementation of its digital marketing solution for restaurant owners. (the “Application”).

Malou and personal data

For the purposes of this document, “personal data” or “personal data” has the meaning defined in article 4 of the “General Data Protection Regulation” (RGPD).

This data is collected, recorded and stored in accordance with the provisions of the law relating to information technology, files and freedoms of January 6, 1978 in its current version, as well as with the provisions resulting from Regulation (EU) No. 2016/679 (RGPD).

Nature of processing and data collected for which Malou acts as data controller — applicable legal bases

Nature of the main treatments provided as data controller and applicable legal bases:

Customer relationship management: The data collected includes the name, first names, position, employer contact information, contact information of the employer, professional contact information (email, telephone, name of the employer, address) and the content of exchanges (emails, meeting notes, etc.). This information concerns the natural person representatives of the customers. The legal basis for this collection is the contract or pre-contractual measures, and the data retention period is limited to the duration of the contract.

‍Management and prospecting of prospects: The data collected includes the name, first names, position, employer contact information, contact information of the employer, professional contact information (email, telephone, name of the employer, address) and the content of exchanges (emails, meeting notes, etc.). They concern the physical person representatives of prospects or leads. The collection is based on consent or legitimate interest, and the data is kept for 3 years after the last contact.

‍Newsletter subscription: The information collected includes the name, first name, position and email of the restaurant customer representatives. The basis for this collection is consent. Data is kept until consent is withdrawn, with a maximum duration of 3 years after the last opening of a newsletter.

‍Newsletter tracking: The data includes the opening of the newsletter, the time spent on the newsletter, and the selection of one of the links in the newsletter. They concern the representatives of the restaurant customer and are collected on the basis of legitimate interest. The data retention period is until the withdrawal of consent, with a maximum limit of 3 years after the last opening of a newsletter.

‍White paper download tracking: The information collected includes first name, last name, establishment name, phone number, email, city, and postal code. This data concerns the natural person representatives of prospects or leads, and is collected on the basis of consent. The data is kept for 3 years after the last contact.

‍Organization of webinars: The data collected includes the name, first name, position, function, email, email, telephone number and webinar participation data (date and time, theme, actual connection). They concern the natural person representatives of prospects or leads and are collected on the basis of consent. The shelf life is 3 years after the last contact.

‍Management of contact requests: The information collected includes name, first names, job/employer, and the content of the request. This data concerns the natural person representatives of prospects or leads and is collected on the basis of consent. The shelf life is 3 years after the last contact.

‍Marketing campaign management: Audience data such as the number of views, consultations, and the profile of people who seen/received the communication are collected. They concern the natural person representatives of prospects or leads and are collected on the basis of legitimate interest. The data is kept for 3 years after the last contact.

‍Improvement of the solution and production of statistics: Technical and usage data are collected and concern the representatives of the restaurant customer. The collection is based on legitimate interest and the data is anonymized.

‍Managing the creation and monitoring of the use of accounts: The information collected includes professional contact details (email, phone number), password, password, last name, first name, position, employer data, and account creation date. This data concerns the representatives of the restaurant customer and is collected on the basis of the contract or pre-contractual measures. The shelf life is limited to the duration of the contract.

‍Management of support requests: The data collected includes the name, first names, position, employer contact information, contact information of the employer, professional contact information (email, telephone, name of the employer, address) and the content of the exchanges (emails, nature of the problem encountered, etc.). They concern the representatives of the restaurant customer and are collected on the basis of the contract or pre-contractual measures. The shelf life is limited to the duration of the contract.

‍Invoicing: The data collected includes the identification data of the restaurant customer and bank details. They concern the representatives of the restaurant customer and are collected on the basis of the contract or pre-contractual measures. Accounting records are kept for 10 years.

Transfer of personal data outside the European Union

Malou does not transfer personal data outside the European Union.

In the event that a customer or a subcontractor is located outside the European Union or a country benefiting from an adequacy decision, Malou will conclude standard contractual clauses from the European Commission with this customer or subcontractor in order to regulate the conditions for the transfer and access to personal data.

Security and confidentiality of personal data

Malou takes all necessary measures to ensure that access to personal data is strictly limited to persons who need to access it in the context of the provision of its services.

In particular, Malou ensures that persons authorized to process personal data for the purposes of providing services undertake to comply with an obligation of confidentiality or are subject to compliance with an appropriate confidentiality obligation.

Malou also undertakes to implement sufficient and appropriate technical measures to preserve the integrity and confidentiality of personal data and to protect them against accidental or unlawful destruction, loss, alteration, unauthorized distribution or access as well as against any other form of unlawful processing. Taking into account the state of the art and the costs associated with their implementation, these measures must ensure a level of security appropriate to the risks presented by the processing and the nature of the personal data to be protected.

Malou uses secure means of communication to process personal data.

Personal rights

Malou collects the personal data referred to above from the representatives of its customers, visitors to the Site and users of the Application.

The persons concerned have the right to access, rectify and delete their personal data by sending an email to the address: dpo@malou.io

In the event of difficulties in processing their personal data, the persons concerned may contact the CNIL or any competent authority.

Cookies

The Site uses cookies.

Some cookies are strictly necessary for the functioning of the Site.

When Malou uses cookies that are not strictly essential to the functioning of the Site and the Application, they are only placed on the browser after acceptance by the site visitor. Browsing preferences can be changed at any time.

The list of cookies and their settings is available on the cookie configuration tool (Cookies Management Platform/Cookies banner).

------

This Privacy Policy (“Policy”) governs the collection, use, and sharing of personal information when you use the Malou application (“integration”) integrated with TikTok. It's critical to understand that your use of the integration is subject to the TikTok developer terms of use and the TikTok privacy policy.

By accessing or using our integration, you are accepting the practices described in this Policy and the TikTok Privacy Policy. If you do not agree to this policy or the TikTok privacy policy, do not use the integration.

1. Information we collect

1.1 User Data: When you use the integration to access TikTok services, we may collect and process personal information in accordance with TikTok's Data Use Guidelines and TikTok's Privacy Policy.

1.2 Usage Data: We may collect data related to your use of the integration, including log data and analytics information, in order to improve our services.

2. How we use your information

2.1 Use of the integration: We use your information to enable integration features and to provide access to TikTok services through the integration.

2.2 Analysis: We may use usage data to analyze and improve integration performance and user experience.

3. Sharing your information

We may share your information as necessary to comply with legal obligations, protect our rights, or fulfill the purposes described in this policy. Please refer to the TikTok Privacy Policy for more details on how TikTok handles your information.

4. Data security

We take reasonable steps to protect the security of your information. However, no method of transmitting or storing data is completely secure. You use integration at your own risk.

5. Data Retention

We will keep your information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

6. Access and control

You have the right to access, correct, or delete your personal information in accordance with applicable data protection laws. Please contact us at [Your Contact Information] for assistance.

7. Updates to this policy

We may update this policy to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any significant changes to this policy.

8. Contact information

If you have any questions or need assistance with this policy, please contact us at contact@malou.io.

9. Applicable law

This policy is governed by French law, and any dispute related to this policy will be subject to the exclusive jurisdiction of the French courts.

10. Various

This policy is part of the overall agreement between you and Malou Food Marketing regarding integration. If any provision of this Policy is found to be invalid or unenforceable, the remaining provisions will remain in full force and effect.

‍